Trust centre

Architecture

• Schema-per-tenant physical separation
• Two identity planes for robust segregation
• Storage tiers including dedicated bucket with customer-managed KMS key

Access Control

• Persona → module → 21-verb vocabulary → data scope
• Four-way separation on the money path with a person-level check
• Three gates that must agree before critical actions

Identity

• SAML 2.0 and OIDC SSO integration
• SCIM provisioning
• Multi-factor authentication (MFA)
• Password policy with history and expiry
• Tenant-scoped API rate limiting

Data Protection (DPDP Ready)

• Encryption at rest with blind indexes
• Hash-chained PII-free audit ledger
• Retention configured as code (config-as-data)
• Data-principal export and erasure workflows
• 100% India data residency

Availability

• Daily backup and restore verification
• Proven RPO: 15 minutes
• Proven RTO: 4 hours

Sub-processors

We partner with trusted infrastructure providers:

• AWS (Hosting & Infrastructure, Mumbai Region)
• MongoDB Atlas (Database, Mumbai Region)
• Cloudflare (CDN and WAF)